ABSTRACT 


Command data includes an address of terminal data to 
be received. A data processor first verifies a signature applied 
to the received command data, and then receives the terminal data 
specified by the command data. The received terminal data is used 
for controlling the data processor such as a screen display. At 
this time, the received data may be segmented into a protected 
data region and an unprotected data region, and any data type 
included in the unprotected data region may be listed as an 
unprotection list. If listed, the unprotection list may be 
arranged in the protected data region. Alternatively, a signer 
certificate may indicate, by type, what data is signable by its 
signer, and at the time of data reception, a determination may 
be made as to whether the signer has authorization for signing 
the data classified under the type. 
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